GCHQ Open Source Tools for Cyber and Data Analysis

Listen to this Post

These GCHQ-developed open-source tools are powerful for data processing, security analysis, and scalable data management. While they are not all โ€œOSINTโ€ tools, they can be valuable to support investigation work and demonstrate GCHQโ€™s incredible contributions to the open-source community in the UK and globally.

๐ŸŒ GCHQ Open Source Tools

๐Ÿ”น CyberChef

A web-based data manipulation tool supporting encoding, encryption, decryption, and analysis. Useful for forensic investigations and security research.
๐Ÿ”— https://lnkd.in/enQhcgu

๐Ÿ”น Stroom

A scalable platform for ingesting, transforming, indexing, and analyzing high-volume data like system logs.
๐Ÿ”— https://lnkd.in/gwKrg8hG

๐Ÿ”น Gaffer

A graph database framework designed for storing, querying, and analyzing large, complex graphs with rich properties.
๐Ÿ”— https://lnkd.in/gbC-esHH

๐Ÿ”น Palisade

A framework for enforcing complex data access policies while ensuring regulatory compliance across multiple datasets and platforms.
๐Ÿ”— https://lnkd.in/gSjPR7WB

๐Ÿ”น Bailo

A machine learning lifecycle tool that enables scalable, compliant, and collaborative model management.
๐Ÿ”— https://lnkd.in/gQJZvQhp

Practice Verified Commands and Codes

1. CyberChef Command Example

  • Use CyberChef to decode Base64:
    echo "SGVsbG8gV29ybGQh" | base64 --decode
    
  • Output: `Hello World!`

2. Stroom Command Example

  • Ingest logs into Stroom using cURL:
    curl -X POST -H "Content-Type: application/json" -d '{"log":"sample log data"}' http://stroom-server/api/ingest
    

3. Gaffer Command Example

  • Query a graph using Gafferโ€™s REST API:
    [bash]
    curl -X POST -H “Content-Type: application/json” -d ‘{“query”:”MATCH (

References:

initially reported by: https://www.linkedin.com/posts/osintuk_cyber-cyber-osint-activity-7302054645395296259-xxms – Hackers Feeds
Extra Hub:
Undercode AIFeatured Image